Re: How can I undo AXMakeProcessTrusted?
Re: How can I undo AXMakeProcessTrusted?
- Subject: Re: How can I undo AXMakeProcessTrusted?
- From: Bill Cheeseman <email@hidden>
- Date: Tue, 13 May 2008 11:03:12 -0400
- Thread-topic: How can I undo AXMakeProcessTrusted?
on 2008-05-13 9:48 AM, Brian Krisler at email@hidden wrote:
> I have an application that uses AXMakeProcessTrusted. I used the
> code from:
> http://caffeinatedcocoa.com/blog/?p=12
>
> And it worked perfectly during my development cycle, however I
> have encountered issues during release.
>
> When I gave to app to someone to install, they get errors in their
> system log:
> Stray process with PGID equal to this dead job: PID 5438 PPID 1
> MakeProcessTrusted
>
> I would like to try to reproduce these errors on my system, but I can
> find no
> documentation on how to remove the trust settings of a process. This
> must be possible?
I'm seeing the same system log entries, on a machine where I ran my own app
using AXMakeProcessTrusted. So chances are good that this is the same issue.
I am not aware of any ill effects, however.
I have not attempted to make a trusted process untrusted. However, I did
notice that the executable for the trusted process has an interesting
privilege setting. It may be that you simply have to restore the file's
privileges to those of a standard executable and relaunch it.
By the way, I wouldn't blindly follow the sample code on
caffeinatedcocoa.com. It's a good demonstration of how AXMakeProcessTrusted
works, but a real world implementation should use a small embedded
application to do the user authentication, in accordance with Apple
documentation regarding safe authentication. Also, you can embed a small app
to relaunch the trusted app automatically. (I disagree with the statement on
caffeinatedcocoa.com that the relaunch requirement is a bug.)
--
Bill Cheeseman - email@hidden
Quechee Software, Quechee, Vermont, USA
www.quecheesoftware.com
PreFab Software - www.prefabsoftware.com
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Accessibility-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden